Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 385231 - Stabilize =sys-fs/udisks-1.0.4-r1 (CVE-2011-2709)
Summary: Stabilize =sys-fs/udisks-1.0.4-r1 (CVE-2011-2709)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Freedesktop bugs
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks:
 
Reported: 2011-10-01 16:35 UTC by Samuli Suominen (RETIRED)
Modified: 2012-07-12 00:33 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Samuli Suominen (RETIRED) gentoo-dev 2011-10-01 16:35:15 UTC
should be fine (and nearly same as 1.0.4 so this has been in tree since Aug)
Comment 1 Agostino Sarubbo gentoo-dev 2011-10-01 19:13:03 UTC
amd64 ok
Comment 2 Markos Chandras (RETIRED) gentoo-dev 2011-10-01 19:50:56 UTC
amd64 done. Thanks Agostino
Comment 3 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-10-04 21:38:57 UTC
x86 stable
Comment 4 Markus Meier gentoo-dev 2011-10-10 21:40:11 UTC
arm stable
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2011-10-17 14:09:34 UTC
Stable for HPPA.
Comment 6 Raúl Porcel (RETIRED) gentoo-dev 2011-10-23 15:52:51 UTC
alpha/ia64/sh/sparc stable
Comment 7 Samuli Suominen (RETIRED) gentoo-dev 2012-01-10 22:21:41 UTC
+  10 Jan 2012; Samuli Suominen <ssuominen@gentoo.org> udisks-1.0.4-r1.ebuild:
+  ppc64 stable wrt #385231
+
   10 Jan 2012; Brent Baude <ranger@gentoo.org> udisks-1.0.4-r1.ebuild:
   Marking udisks-1.0.4-r1 ppc for bug 385231
Comment 8 GLSAMaker/CVETool Bot gentoo-dev 2012-07-12 00:33:42 UTC
CVE-2011-2709 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2709):
  libgssapi and libgssglue before 0.4 do not properly check privileges, which
  allows local users to load untrusted configuration files and execute
  arbitrary code via the GSSAPI_MECH_CONF environment variable, as
  demonstrated using mount.nfs.